Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking New npm timing attack could lead to supply chain attacks New npm timing attack could lead to supply chain attacksPost Views: 6 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe…

ould be very stealthy, as an old copy of a package that used to be public may still retain enough functionality to work as intended in the software product that uses it.
Trending: A primer on OS Command Injection Attacks
Trending: OSINT Tool: ProtOSINT GitHub will not fix the issueAqua Security disclosed the bug to GitHub on March 8th, 2022, but was told on March 25th that it would not be fixed due to architectural limitations.

“Because of these architectural limitations, we cannot prevent timing attacks from determining whether a specific private package exists on npm,” GitHub told Aqua Security.

The researchers say that organizations can take preventive action by frequently searching npm for suspicious packages that spoof their private packages with duplicate or similar names.

Additionally, organizations can create public packages that spoof their private packages as placeholders since npm doesn’t allow uploading same-name packages on public repositories.
Trending: Microsoft SQL servers hacked with FARGO ransomware attacks Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-4-300x150.png Critical RCE Vulnerability Found in vm2 Sandbox LibraryOctober 12, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-3-300x150.png Zimbra remote code execution vulnerability actively exploited in the wildOctober 11, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-2-1-300x150.png Intel confirms leaked Alder Lake BIOS Source Code is authenticOctober 10, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-1-1-300x150.png Linux Kernel 5.19.12 bug could damage Intel laptop displaysOctober 7, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post New npm timing attack could lead to supply chain attacks first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

6 viewsedited 09:10

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
could one clone a 5g sim card using the £5 card reader on ebay so that they could have the same internet data on their phone and ipad at the same time ? And would it support 5g?

Wondering if it would be possible hypothetically obvcourse 😊 Would only work if it would do 5g Don't care about calls or texts only Internet

submitted by /u/jsadecki
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

could one clone a 5g sim card using the £5 card reader on ebay so...

Wondering if it would be possible hypothetically obvcourse 😊 Would only work if it would do 5g Don't care about calls or texts only Internet

7 viewsedited 10:25

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
can they track me

So actually my friend saw my college professor 's password while he's typing, after a couple of tries he was able to login to his Gmail there was no 2fa,i was trying to tease him and unfortunately sent a group email to whole college , now my friend is worried whether they can exactly pin point his location. (He didn't use any vpn)

submitted by /u/Parking-Math-7056
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

can they track me

So actually my friend saw my college professor 's password while he's typing, after a coupon of tries he was able to login to his Gmail there was...

5 viewsedited 10:25

Hacking Articles Tips Tricks Videos Tutorials

5 views10:25

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Prison inmate charged with $11m fraud via cell phone

https://external-preview.redd.it/0WV9sNvqr1alyB_cA0CBbp842soekBkpSKOdIMeI-Rw.jpg?width=640&crop=smart&auto=webp&s=e08a61baa49d5b3996714ca613e6f32ec49bd854 submitted by /u/woehoe198
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Prison inmate charged with $11m fraud via cell phone

Posted in r/hacking by u/woehoe198 • 1 point and 1 comment

7 viewsedited 10:25

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
A Second Language Comes to Linux Kernel! (Rust has emerged as a ‘developer darling’ of late.)

“So, as is hopefully clear to everybody, the major version number change is more about me running out of fingers and toes than it is about any big fundamental changes,” wrote Linus Torvalds as he introduced Linux 6.0 earlier this month. He also added, “I’ll open the merge window for 6.1, which—unlike 6.0—has a number of fairly core new things lined up.”

All speculations, which heightened after Torvalds teased in the Linux 6.0 release note, were confirmed after he accepted the pull request made by Kees Cook, a Kernel security engineer at Google. This means that v6.1 will have direct support for the Rust code. Linux will not be entirely rewritten in Rust, but the process is already ongoing for adding 12,500 lines of code to the Linux kernel.

submitted by /u/ronkar-karma
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

A Second Language Comes to Linux Kernel! (Rust has emerged as a...

“So, as is hopefully clear to everybody, the major version number change is more about me running out of fingers and toes than it is about any big...

7 viewsedited 10:25

Hacking Articles Tips Tricks Videos Tutorials

5 views11:07

Hacking Articles Tips Tricks Videos Tutorials

5 views11:07

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Defeat LAPS with NTLM-Relay

https://cdn-images-1.medium.com/max/1262/1*q5BAvamNj5dHuKHmT6-VuQ.png
In our internal pentests, relay attacks that use the NTLM method are still successful (unfortunately). Many older systems cannot be…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Defeat LAPS with NTLM-Relay